Difference between virtual address space

[Alwaysnopro]

Hi, sir. I have some trouble with Kernel State(CPU registers restored in pt_regs). When enable ALSR and write /proc/{src_pid}/mem into /proc/{dst_pid}/mem, the value of registers(pt_regs->ip, pt_regs->sp……) are different. How to modify kernel state(pt_regs)?Could you give some ideas?

[srinskit]

Could you elaborate on the issue/error?

the value of registers(pt_regs->ip, pt_regs->sp……) are different

Is there a virtual address space mismatch or an error while overwriting kernel state?

Is your issue similar to this?

[Alwaysnopro]

I did not echo 0 into /proc/sys/kernel/randomize_va_space, it means the two virtual address space mismatch. when I write /proc/{src_pid}/mem into /proc/{dst_pid}/mem via /proc/{dst_pid}/mem, it is ok. However, Kernel State go wrong.

#read from dst_maps
for line in dst_maps_file.readlines():
if line.find("vsyscall") != -1 or line.find("vdso") != -1 or line.find("vvar") != -1:
continue
m = re.match(r'([0-9A-Fa-f]+)-([0-9A-Fa-f]+)', line)
start = int(m.group(1), 16)
end = int(m.group(2), 16)
size = end - start
chunk = src_mem_file.read(size)
dst_mem_file.seek(start)
bytes_written = dst_mem_file.write(chunk)
assert bytes_written == size, "could not write chunk"
logger.debug("Restored virtual memory state")

vmem_load(dst_pid, dst_dir)
kstate_load(dst_pid, dst_dir)

then, segfault occured.
[16886.782586] iter-printer[10812]: segfault at 7efd0a6581e2 ip 00007efd0a6581e2 sp 00007ffe51dfd700 error 14 in libc-2.31.so[7f2b1e631000+22000]
[16886.782604] Code: Unable to access opcode bytes at RIP 0x7efd0a6581b8.

Besides enable ALSR, any other ways could solve it?
Thank you very much.